Incorrect Access Control in TOTOLINK T6 Firmware

Executive Summary

This vulnerability is an incorrect access control issue in the getScheduleCfg function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. It allows unauthenticated attackers to retrieve sensitive schedule or scheduled-reboot configuration information by sending a specially crafted POST request to the vulnerable endpoint /cgi-bin/cstecgi.cgi.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, scan for exposed TOTOLINK T6 devices with firmware version 4.1.5cu.748_B20211015. Use network scanning tools like Nmap to identify devices with open port 80 or 443. Check for unusual POST requests to /cgi-bin/cstecgi.cgi with parameters related to schedule or scheduled-reboot configuration.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to gain unauthorized access to network schedules or reboot timings, potentially disrupting network operations or enabling further attacks by leveraging timing information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to the latest patched version. If an update is unavailable, restrict access to the device's web interface by blocking external connections to ports 80 and 443. Monitor network traffic for suspicious POST requests to /cgi-bin/cstecgi.cgi.

Useful 0 Not Useful 0